Privacy policy
Last updated: 3 October 2026
Who we are
Campos Hospitalidade is operated by Dynamic Empreendimentos Ltda (Brazilian company number CNPJ 04.877.131/0001-02), which manages short-term rental properties and this website and is the controller of the data described here. Privacy contact: [email protected].
What data we process and why
| Situation | Data | Purpose |
|---|---|---|
| Contact form | name, email, WhatsApp (optional), subject and message | to reply to your message |
| Guest portal | name, email, password (stored encrypted), linked booking and, when the building requires it, ID document and selfie | access to your stay, clearance at the front desk and compliance with building rules |
| Stay details in the guest portal | mobile number, language, purpose of the trip, expected arrival and departure times, parking needs, number of adults, children, babies and pets, ages of minors and the name, mobile number and age of accompanying guests | to prepare your stay, check the number of guests against the booking and grant access at the building |
| Team and owners area | name, email, encrypted password and access role | restricted management access |
| Team registration (by invitation) | name, phone, CPF (Brazilian tax number), date of birth (optional), address, city, state, postcode, Pix key and, if provided, bank, branch and account | to contract and pay for the services provided |
| Owners and partners registration | CPF or CNPJ, phone, contact email, address, account holder, bank details and Pix key for payouts | contracts, agreements and payouts |
| Cleaning photos and videos | arrival video, extra video and photos recorded by the cleaning professional in the property, including the sound captured, plus who recorded them and when | to record the condition of the property and the quality of the cleaning |
| Notifications | the browser's technical delivery address and notification subscription keys, browser type and dates of activation and deactivation | to send stay notices to guests and cleaning requests and operational notices to the team |
| Sign in with Google | name, email and Google account identifier (basic scopes openid, email and profile) | to sign in people who already have access; we do not access Gmail, Drive, contacts or any other account data |
| Sign-in records for the team area and the app | date and time of sign-in and sign-out, sign-in method (password, Google or app code), device type, brand and model, browser, IP address, city, state, country and network operator approximated from the IP, last use, app version, whether notifications are on and failed sign-in attempts; kept for 12 months | account security (alert for a new device or location, lock after failed attempts and ending sessions) and making sure operational notices are delivered |
Campos app for Android
The Campos app is the mobile version of the team and owners area and shows the same platform pages, with the same data described above. On the device it only stores the login session and the language preference, uses encrypted connections (HTTPS) only and excludes its data from Android's automatic backup. The camera and microphone are only used when the person starts recording a cleaning video or photo, with Android's permission. Files on the device are only read when the person chooses a file to upload. To make sure notices are delivered, the app only works with notifications on and battery optimization turned off for it, and it tells the platform the device brand and model and whether notifications are on. The app does not use the device location (the approximate location of each sign-in comes from the IP address), contacts, calendar or SMS and has no advertising, analytics or tracking tools.
Notifications
Guests can turn on notifications in the guest portal, and the team in the cleaning schedule. Turning them on creates a subscription in the browser (a technical delivery address and keys), which we store linked to the account to send notices. Delivery goes through the push service of the browser or the device's operating system (for example Google, Apple or Mozilla), with the content encrypted. Team notices only include the property, day and time. The Android app uses no subscription: about every 15 minutes it checks the platform with its own session and shows cleaning requests and operational notices, without guest names or access codes. To turn them off, block notifications for this site in your browser settings or for the Campos app in Android settings; signing out also stops the app's checks. Subscriptions rejected by the device are deactivated automatically.
Cleaning photos and videos
At each cleaning, the professional records an arrival video through the platform and may record an extra video and up to 10 photos, to document the condition of the property and the quality of the service. The images may show the inside of the property and items left there. The files are kept in Cloudflare storage and can only be viewed by Campos Hospitalidade's management and by the professional herself until she completes the cleaning. They are not sent to guests, owners or third parties. The retention period will be published on this page once automatic deletion is in operation.
Protection of registrations
Team registration data and the ID, contact and payout data of owners and partners are stored encrypted, and only authorised management staff can access them. Each access to owners' and partners' data is logged.
Sharing
We do not sell data. We use providers to run the website and the app: Cloudflare (hosting, database and file storage, such as cleaning photos and videos), Microsoft (file storage) and Google (sign-in, transactional email and website fonts). Notifications are delivered through the push service of the browser or device. ID documents and selfies are only sent to those who need them to grant access, such as building management or the front desk. Bookings come from Airbnb and Booking.com, which have their own policies.
Retention
ID documents and selfies from the guest portal are deleted within six months after check-out; only an audit record without the file is kept. After 24 months, contact messages and unused accounts have the data that identifies the person deleted (name, email, phone, password and message text). We keep only anonymised information, such as dates, subject and language, for internal statistics. The same rule deletes the team registration of deactivated accounts, including CPF, address and bank details, and guests' notification subscriptions.
Cookies
We only use essential session cookies to keep you signed in. We do not use advertising or analytics cookies.
Your rights
Under Brazil's data protection law (LGPD, art. 18) you may request confirmation of processing, access, correction, deletion, portability and information about sharing, and withdraw consent, by writing to the email above. You may also complain to the Brazilian Data Protection Authority (ANPD).
Changes
Updates to this policy will be published on this page with the new date.